Generate private key + CSR in PEM format.
FQDN for the certificate.
Legal registered name.
2-letter ISO code, e.g. US, ID, SG.
Save both the CSR and private key. The private key will not be stored anywhere.